Dropped Files | ZeroBOX

Name	4826c0d860af884d_~wrs{be4cdd90-8279-41d0-b946-07cb50716005}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDD90-8279-41D0-B946-07CB50716005}.tmp
Size	1.0KB
Processes	1880 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	cb0e548742b2e252_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1880 (WINWORD.EXE)
Type	data
MD5	`6bf2b45dc28460d48b653f8069f9d67b`
SHA1	`ef4f6bb6d975d40384c90841c0af55662b061eb6`
SHA256	`cb0e548742b2e252a8aaa3cee2ff5cc2d261957e992864a404aa564bfca8b8cb`
CRC32	`21DE6B66`
ssdeep	`3:yW2lWRd+3/W6L7/1XK7ffWtpgFItj/tCtU//:y1lWUWm7dK7mtKWj/V//`
Yara	None matched
VirusTotal	Search for analysis

Name	4a526d34d9487e06_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size	16.0B
Processes	1880 (WINWORD.EXE)
Type	data
MD5	`8fbfe9d320f1324883fef8b0cadf557b`
SHA1	`28374e66f28653708709f0148165669649826bae`
SHA256	`4a526d34d9487e063e75bcbaebfe2b2b588fd86fdeb9a4ac8c10437ebaf25a0a`
CRC32	`197297A3`
ssdeep	`3:hl0Zn:q`
Yara	None matched
VirusTotal	Search for analysis

Name	c89c85900807d4a5_~$tracted_at_0x1dfdf.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x1dfdf.rtf
Size	162.0B
Processes	1880 (WINWORD.EXE)
Type	data
MD5	`7baf9de5bfe4323318f9f2566926e182`
SHA1	`ff0ef0a03953d71472f1483e906bf85f1833bb6e`
SHA256	`c89c85900807d4a5529f351f7131eb2d4160d6e27f95df1ee6c6039ebcd01bd1`
CRC32	`F8F429C0`
ssdeep	`3:yW2lWRd+3/W6L7/1XK7ffWtpgFItj/tCi1:y1lWUWm7dK7mtKWj/f`
Yara	None matched
VirusTotal	Search for analysis